RepoMirrors
/
selinux-refpolicy
mirror of https://github.com/SELinuxProject/refpolicy
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add required permissions for nsd_t to be able running. 

Add required permissions to nsd_t for NSD work properly.
This commit is contained in:
Alexander Miroshnichenko 2018-12-30 18:27:30 +03:00
parent e5ac999aab
commit e426b5785f
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
policy/modules/services/nsd.te
View File

@ -34,7 +34,7 @@ files_type(nsd_zone_t)
# Local policy
#
allow nsd_t self:capability { chown dac_override kill setgid setuid };
allow nsd_t self:capability { chown dac_override kill setgid setuid dac_read_search net_admin };
dontaudit nsd_t self:capability sys_tty_config;
allow nsd_t self:process signal_perms;
allow nsd_t self:fifo_file rw_fifo_file_perms;
@ -44,12 +44,14 @@ allow nsd_t nsd_conf_t:dir list_dir_perms;
allow nsd_t nsd_conf_t:file read_file_perms;
allow nsd_t nsd_conf_t:lnk_file read_lnk_file_perms;
allow nsd_t nsd_db_t:file map;
allow nsd_t nsd_db_t:file manage_file_perms;
filetrans_pattern(nsd_t, nsd_zone_t, nsd_db_t, file)
manage_files_pattern(nsd_t, nsd_var_run_t, nsd_var_run_t)
files_pid_filetrans(nsd_t, nsd_var_run_t, file)
allow nsd_t nsd_zone_t:file { map };
manage_dirs_pattern(nsd_t, nsd_zone_t, nsd_zone_t)
manage_files_pattern(nsd_t, nsd_zone_t, nsd_zone_t)
manage_lnk_files_pattern(nsd_t, nsd_zone_t, nsd_zone_t)